13.8: Manage System’s External Removable Media’s Read/Write Configurations

CSF v1.1 References:

PR.PT-2

PF v1.0 References:

PR.PT-P1

Threats Addressed:

Information Disclosure

Group:

IG3

Control is withdrawn in the next version of this control set.

Control Statement

Configure systems not to write data to external removable media, if there is no business need for supporting such devices.

[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]